https://community.splunk.com/t5/Getting-Data-In/Configuring-forwarding-from-splunk-to-an-external-syslog-server/m-p/83721#M17412 <P>Hello,</P> <P>What is the recommended method of forwarding all splunk inputs to an external syslog server listening on UDP/514?</P> <P>Our setup in question is a Full Splunk 6.0 implementation and has multiple data inputs listening on multiple ports (514-520) logging data into multiple Source Types and Indexes. </P> <P>I am looking for the recommended configuration within Splunk to forward all that data (no filtering required) to an external syslog server (SIEMC).</P> <P>Thanks!!</P> Fri, 04 Oct 2013 22:02:52 GMT jmunroe 2013-10-04T22:02:52Z https://community.splunk.com/t5/Getting-Data-In/Configuring-forwarding-from-splunk-to-an-external-syslog-server/m-p/83721#M17412 <P>Hello,</P> <P>What is the recommended method of forwarding all splunk inputs to an external syslog server listening on UDP/514?</P> <P>Our setup in question is a Full Splunk 6.0 implementation and has multiple data inputs listening on multiple ports (514-520) logging data into multiple Source Types and Indexes. </P> <P>I am looking for the recommended configuration within Splunk to forward all that data (no filtering required) to an external syslog server (SIEMC).</P> <P>Thanks!!</P> Fri, 04 Oct 2013 22:02:52 GMT https://community.splunk.com/t5/Getting-Data-In/Configuring-forwarding-from-splunk-to-an-external-syslog-server/m-p/83721#M17412 jmunroe 2013-10-04T22:02:52Z https://community.splunk.com/t5/Getting-Data-In/Configuring-forwarding-from-splunk-to-an-external-syslog-server/m-p/83722#M17413 <P>Check out this Answers topic: <A href="http://answers.splunk.com/answers/5807/output-syslog-to-external-system">Output syslog to external </A><BR /> Here is the relevant section of the documentation: <A href="http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Forwarddatatothird-partysystemsd#Syslog_data">Forward data to third party systems -- Syslog data</A></P> Fri, 04 Oct 2013 22:40:37 GMT https://community.splunk.com/t5/Getting-Data-In/Configuring-forwarding-from-splunk-to-an-external-syslog-server/m-p/83722#M17413 matt 2013-10-04T22:40:37Z https://community.splunk.com/t5/Getting-Data-In/Configuring-forwarding-from-splunk-to-an-external-syslog-server/m-p/83723#M17414 <P>If no filtering is require, you can just edit outputs.conf:</P> <P>Edit outputs.conf to specify receiving host/IP and port<BR /> [syslog:my_target_grp]<BR /> type = tcp (Optional)<BR /> server = 192.168.0.1:514</P> Mon, 28 Sep 2020 19:29:13 GMT https://community.splunk.com/t5/Getting-Data-In/Configuring-forwarding-from-splunk-to-an-external-syslog-server/m-p/83723#M17414 psow_splunk 2020-09-28T19:29:13Z